The most commonly used JavaScript effect on the Web is the image rollover. For the one person with access to the Web who’s never seen one before, an image rollover happens when you move your ...

The authors turned to polyglot images to add the JavaScript code that redirects to a page offering a fake reward. The malicious code is hidden in a BMP type of picture and it is heavily obfuscated.